What is claimed is: 

1. A business method comprising: 

creating an agreement between a first entity and a second entity to 
provide a data protection service to a third entity, wherein the first entity 
purchases a data protection service from the second entity for use by the 
third entity; and 

creating an insurance agreement between the first entity and the third 
entity, wherein the insurance agreement provides that the first entity will 
insure the third entity for losses arising out of lost data, wherein the 
insurance agreement authorizes the third entity to use the data protection 
service provided by the second entity. 

2. A method according to claim 1, wherein the insurance agreement 
requires the third entity to use the data protection service provided by the 
second entity. 

3. A method according to claim 1, wherein the first entity's insurance 
of the third entity against losses arising of data loss is at least partially 
contingent upon the third entity's using predetermined services provided by 
the second entity. 

4. A method according to claim 3, wherein the predetermined services 
are specified in the insurance agreement. 

5. A method according to claim 1, wherein the identity of the second 
entity is specified in the insurance agreement. 
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6. A method according to claim 1, wherein the data protection service 
is a data backup service, and further comprising: 

creating a backup copy of the third entity's data at a location controlled 
.by the second entity; and 

generating, after a loss of the third entity's data, a further copy of the 
third entity's data from the backup copy. 

7. A method according to claim 6, wherein the data backup service is 
an online data backup service. 

8. A method according to claim 1, and further comprising providing 
compensation from the first entity to the second entity in return for the 
second entity's provision of data protection services to the third entity. 

9. A method according to claim 8, wherein the third entity is not 
required to pay a premium to the first entity, beyond what the first entity 
would ordinarily charge for providing insurance without the provision of data 
protection services. 

10. A loss mitigation tool for an insurer that insures an insured entity, 
wherein the insurer purchases a data protection service from a second entity 
for use by the insured entity, the loss mitigation tool comprising: 

an insurance agreement between the insurer and the insured entity, 
wherein the insurance agreement provides insurance to the insured entity for 
losses arising out of lost data, and wherein the insurance agreement includes 
a data protection provision under which the insured entity is allowed to use 
the data protection service. 
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11. A loss mitigation tool according to claim 10, wherein the insurance 
agreement requires the insured entity to use the data protection service 
provided by the second entity. 

12. A loss mitigation tool according to claim 10, wherein the insurance 
agreement makes the insured entity's recovery from the insurer for losses 
arising out of lost data at least partially contingent upon the insured entity's 
use of the predetermined data protection services provided by the second 
entity. 

13. A loss mitigation tool according to claim 10, wherein the identity of 
the second entity is specified in the insurance agreement. 

14. A loss mitigation tool according to claim 10, wherein the data 
protection service is a data backup service, and the data backup service 
comprises: 

apparatus operable to create a backup copy of the insured entity's data 
at a location controlled by the second entity; and 

apparatus operable to generate a copy of the insured entity's data from 
the backup copy. 

15. A loss mitigation tool according to claim 14, wherein the data 
backup service is an online data backup service. 

16. A loss mitigation tool according to claim 10, wherein the insurer 
compensates the second entity for providing the data protection service to the 
insured entity, and wherein the insured entity is not required to pay 
compensation for the provision of the data protection service beyond what the 
insurer would ordinarily charge for insuring the insured entity against losses 
arising out of lost data. 
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17. A loss mitigation tool according to claim 16, wherein the insurance 
agreement includes a condition that the insured entity is responsible for 
using the data protection service if the insured entity is to recover under the 
insurance agreement, and wherein the insurance is not provided if the 
condition is not satisfied. 

18. An insurance system comprising: 
a data protection service provider; 

an insurer, wherein the insurer acquires data protection services from 
the data protection service provider for use by the insurer's insureds; and 

an insured that is insured by the insurer against losses arising out of 
lost data, wherein an insurance agreement between the insurer and the 
insured allows the insured to use the data protection services acquired by the 
insurer. 

19. An insurance system according to claim 18, wherein the insurance 
agreement requires the insured to use the data protection service provided by 
the data protection service provider. 

20. An insurance system according to claim 18, wherein the insurance 
of the insured against losses arising out of lost data is at least partially 
contingent upon the insured's using predetermined data protection services 
provided by the data protection service provider. 

21. An insurance system according to claim 20, wherein the 
predetermined data protection services are specified in the insurance 
agreement. 
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22. An insurance system according to claim 18, wherein the data 
protection service provider provides a data backup service, and further 
comprising: 

apparatus operable to create a backup copy of the insured's data at a 
location controlled by the data protection service provider; and 

apparatus operable to generate, after a loss of the insured's data, a 
further copy of the insured's data from the backup copy. 

23. An insurance system according to claim 22, wherein the data 
backup service is an online data backup service. 

24. An insurance system according to claim 18, wherein the insurer 
compensates the data protection service provider for allowing the insured to 
use the data protection services. 

25. An insurance system according to claim 24, wherein the insured is 
not required to pay a premium to the insurer, beyond what the insurer would 
ordinarily charge for providing insurance without the provision of data 
protection services. 

26. A business method comprising: 

creating an insurance agreement between an insurer and an insured, 
wherein the insurance agreement provides that the insurer will insure the 
insured for losses arising out of lost data, and wherein the insurance 
agreement requires the insured to use a data protection service provided by a 
data protection service provider; and 

creating a data protection service agreement between the insured and 
the data protection service provider, wherein the data protection service 
agreement provides that the data protection service provider will provide a 
data protection service to the insured. 
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27. The method of claim 26, wherein the insurance agreement 
provides that the insurer will charge the insured a reduced premium for the 
insurance, contingent upon the insured's using the data protection service. 

28. A method according to claim 26, wherein the identity of the data 
protection service provider and the nature of the data protection service are 
specified in the insurance agreement. 

29. A method according to claim 26, wherein the data protection 
service is a data backup service, and further comprising: 

creating a backup copy of the insured's data at a location controlled by 
the data protection service provider; and 

generating, after a loss of the insured's data, a further copy of the 
insured's data from the backup copy. 

30. A method according to claim 29, wherein the data backup service 
is an online data backup service. 

31. A method according to claim 26, wherein the insured's recovery for 
losses arising out of lost data is at least partially contingent upon the 
insured's use of the data protection service. 

32. A business method comprising: 

creating an insurance agreement between an insurer and an insured, 
wherein the insurance agreement provides that the insurer will insure the 
insured for losses arising out of lost data, and wherein the insurance 
agreement requires the insured to use a data protection service provided by a 
data protection service provider; 

creating a data protection service agreement between the insured and 
the data protection service provider, wherein the data protection service 
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agreement provides that the data protection service provider will provide a 
data protection service to the insured; and 

creating an agreement between the insurer and the data protection 
service provider that provides for at least one of: 

compensation from the data protection service provider to 

the insurer for the insurer's requirement that the insured use 

the data protection service; and 

a discount in the amount normally charged by the data 

protection service provider for providing the data protection 

service. 

33. A method according to claim 32, wherein the insurance agreement 
requires the insured to purchase the data protection service from the data 
protection service provider. 

34. A method according to claim 32, wherein the insured's recovery for 
losses arising out of lost data is at least partially contingent upon the 
insured's use of the data protection service. 

35. A method according to claim 32, wherein the data protection 
service is a data backup service, and further comprising: 

creating a backup copy of the insured's data at a location controlled by 
the data protection service provider; and 

generating, after a loss of the insured's data, a further copy of the third 
entity's data from the backup copy. 

36. A method according to claim 35, wherein the data backup service 
is an online data backup service. 
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37. A business method comprising: 

creating an agreement between a provider and a data owner wherein 
the agreement includes: 

an data protection provision under which the provider 
agrees to provide a data protection service to the data owner; 
and 

an insurance provision under which the provider agrees to 
insure the data owner for losses arising out of data loss by the 
data owner. 

38. A method according to claim 37, wherein the insurance provision 
requires the data owner to use the data protection service. 

39. A method according to claim 37, wherein the provider's insurance 
of the data owner against losses arising of data loss is at least partially 
contingent upon the data owner's using predetermined data protection 
services provided by the provider. 

40. A method according to claim 39, wherein the predetermined 
services are specified in the agreement. 

41. A method according to claim 37, wherein the data protection 
service is a data backup service, and further comprising: 

creating a backup copy of the data owner's data at a location controlled 
by the provider; and 

generating, after a loss of the data owner's data, a further copy of the 
data owner's data from the backup copy. 

42. A method according to claim 41, wherein the data backup service 
is an online data backup service. 

r 

19 



43. A method according to claim 37, wherein the data owner is not 
required to pay a premium to the provider, beyond what the provider would 
ordinarily charge for providing insurance without the provision of data 
protection services. 

44. A loss mitigation tool for an insurer that insures an insured entity, 
wherein the insurer provides a data protection service for use by the insured 
entity, the loss mitigation tool comprising: 

an insurance agreement between the insurer and the insured entity, 
wherein the insurance agreement provides insurance to the insured entity for 
losses arising out of lost data, and wherein the insurance agreement includes 
a data protection provision under which the insured entity is allowed to use 
the data protection service. 

45. A loss mitigation tool according to claim 44, wherein the insurance 
agreement requires the insured entity to use the data protection service. 

46. A loss mitigation tool according to claim 44, wherein the insurance 
agreement makes the insured entity's recovery from the insurer for losses 
arising out of lost data at least partially contingent upon the insured entity's 
use of the predetermined data protection services. 

47. A loss mitigation tool according to claim 44, wherein the data 
protection service is a data backup service, and the data backup service 
comprises: 

apparatus operable to create a backup copy of the insured entity's data 
at a location controlled by the insurer; and 

apparatus operable to generate a copy of the insured entity's data from 
the backup copy. 
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48. A loss mitigation tool according to claim 47, wherein the data 
backup service is an online data backup service. 

49. A loss mitigation tool according to claim 44, wherein the insured 
entity is not required to pay compensation for the provision of the data 
protection service beyond what the insurer would ordinarily charge for 
insuring the insured entity against losses arising out of lost data. 

50. A loss mitigation tool according to claim 49, wherein the insurance 
agreement includes a condition that the insured entity is responsible for 
using the data protection service if the insured entity is to recover under the 
insurance agreement, and wherein the insurance is not provided if the 
condition is not satisfied. 

51. An insurance and data protection system comprising: 
a provider; and 

a data owner; 

wherein the provider provides a data protection service to the data 
owner; and 

wherein the provider insures the data owner against losses arising out 
of lost data. 

52. A system according to claim 51, wherein the data owner is 
required by the provider to use the data protection service. 

53. A system according to claim 51, wherein the insurance of the data 
owner against losses arising out of lost data is at least partially contingent 
upon the data owner's using predetermined data protection services provided 
by the provider. 
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54. A system according to claim 51, wherein the provider provides a 
data backup service, and further comprising: 

apparatus operable to create a backup copy of the data owner's data at 
a location controlled by the provider; and 

apparatus operable to generate, after a loss of the data owner's data, a 
further copy of the data owner's data from the backup copy. 

55. A system according to claim 54, wherein the data backup service is 
an online data backup service. 

56. A system according to claim 51, wherein the data owner is not 
required to pay a premium to the provider, beyond what the provider would 
ordinarily charge for providing insurance without the provision of the data 
protection service. 
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